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(54) RADIO COMMUNICATION SYSTEM AND CONTROL METHOD THEREFOR 
(57)Abstract: 

PROBLEM TO BE SOLVED: To independently update an encryption key by a system. 
SOLUTION: An access point 100 periodically broadcasts and transmits a beacon 
frame to the terminal of a service set. The beacon frame is equipped with a field for 
reporting a key number. Then, an IC card for storing the key information of a key itself 
in the order of key numbers is mounted at the access point and on the terminal. The 
access point periodically changes the key and a changed key number is distributed to 
the terminal by the beacon frame. Each terminal specifies the key information from 
the key number in the beacon frame and utilizes that key information for encryption 
and decryption. 
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CLAIMS 



[Claim(s)] 

[Claim 1] A storage means to be the radio communications system which connects a 
terminal and an access point by radio, to prepare for each of said terminal and access 
point, and to memorize an encryption key identifiable with an index, In a distribution 
means to distribute the index of the encryption key determined as what is used in said 
access point to said terminal, and said terminal The radio communications system 
which reads the encryption key identified by the index distributed from said access 
point from said storage means, and is characterized by having a means to register as 
an encryption key to be used. 

[Claim 2] Said storage means is a radio communications system according to claim 1 
characterized by including the storage which can be detached and attached freely to 
said terminal and access point. 

[Claim 3] The radio communications system according to claim 1 or 2 characterized 
by newly determining the encryption key used whenever the amount of data which 



communicates between said access points and terminals reaches constant value in 
said access point. 

[Claim 4] The radio communications system according to claim 1 or 2 characterized 
by newly determining the encryption key used in said access point whenever it carries 
out fixed time amount progress. 

[Claim 5] The radio control unit carry out having a storage means are the radio control 
unit connected with the terminal by radio, and memorize an encryption key identifiable 
with an index, a key decision means determine the encryption key use it, a means 
register as an encryption key which uses for the determined encryption key, reading 
from said storage means, and a distribution means distribute said determined index of 
an encryption key to said terminal as the description. 

[Claim 6] Said storage means is a radio control unit according to claim 5 characterized 

by including the storage which can be detached and attached freely. 

[Claim 7] Said key decision means is a radio control unit according to claim 5 or 6 

characterized by newly determining the encryption key used whenever the amount of 

data which communicates between said terminals reaches constant value. 

[Claim 8] Said key decision means is a radio control unit according to claim 5 or 6 

characterized by newly determining the encryption key used whenever it carries out 

fixed time amount progress. 

[Claim 9] The terminal unit characterized by having a means to be the terminal unit 
connected with the radio control unit by radio, to read the encryption key identified by 
storage means to memorize an encryption key identifiable with an index, and the index 
distributed from said radio control unit from said storage means, and to register as an 
encryption key to be used. 

[Claim JO] Said storage means is a terminal unit according to claim 9 characterized by 
including the storage which can be detached and attached freely. 
[Claim 1 1] The computer program for reading the encryption key determined as a key 
decision means to by.which the computer connected with the terminal by radio 
determines the encryption key to be used from a storage means memorize an 
encryption key identifiable with an index, and realizing a means register as an 
encryption key to be used, and a distribution means distribute said determined index 
of an encryption key to said terminal. 

[Claim 12] Said key decision means is a computer program according to claim 11 
characterized by newly determining the encryption key used whenever the amount of 
data which communicates between said terminals reaches constant value. 
[Claim 13] Said key decision means is a computer program according to claim 11 
characterized by newly determining the encryption key used whenever it carries out 
fixed time amount progress. 

[Claim 14] The computer program for reading the encryption key identified by the 
index distributed from said radio control unit by computer connected with the radio 



control unit by radio from a storage means to memorize an encryption key identifiable 
with an index, and realizing a means to register as an encryption key to be used. 
[Claim 1 5] It is the control approach of the radio communications system which 
connects a terminal and an access point by radio. The index of the encryption key 
determined as what is used in said access point is read from a storage means to 
memorize an encryption key identifiable with an index. In the distribution process 
which distributes the index of the encryption key determined as the process 
registered as an encryption key to be used, and the thing to use in said access point 
to said terminal, and said terminal The control approach of the radio communications 
system which reads the encryption key identified by the index distributed from said 
access point from a storage means to memorize an encryption key identifiable with an 
index, and is characterized by having the process registered as an encryption key to 
be used. 

[Claim 16] The radio communications system which is a radio communications system 
including the access point connected to the wire net, and is characterized by to have 
the storage with which said client terminal and the device of the both sides of said 
access point were equipped, a means match the key information for data encryption 
with an in DEKKUSSU number, and memorize it in said storage, and a means return 
the key information for said encryption from said storage corresponding to the inquiry 
by said in DEKKUSSU number from said device side. 

[Claim 1 7] The radio communications system according to claim 1 6 characterized by 
having further an encryption means to encipher commo data using the key for said 
encryption read from said storage. 

[Claim 18] Said encryption means is a radio communications system according to 
claim 17 characterized by considering as the object of encryption of all the data on a 
communication link frame. 

[Claim 19] Said encryption means is a radio communications system according to 
claim 1 7 characterized by considering as the object of encryption of the data except 
the management data on a communication link frame. 

[Claim 20] Said access point is a radio communications system given in claim 16 
which the access point concerned carries out broadcast transmission of the beacon 
frame to which the index number of the encryption key information under current use 
was added with a fixed time interval, and is characterized by notifying the profile 
information of the area which said access point generalizes to said client terminal 
thru/or any 1 term of 1 9. 

[Claim 21] It is the radio communications system according to claim 17 to 20 
characterized by enciphering the data which have a means by which said access point 
changes said key information at intervals of predetermined within the limits of said 
number for in DEKKUSSU in said wireless local communication network, read the key 
information for said encryption corresponding to a random number from said 



removable storage, and are transmitted from said access point using the encryption 
key information concerned. 

[Claim 22] Said access point is the radio communications system according to claim 
21 carry out changing the encryption key which has a means measure the encryption 
amount of data used for the local communication link between the access point-client 
terminals concerned, and a means check the existence of a local communication link, 
performs modification processing of after termination of a local communication link of 
1 communication-link frame unit and an encryption key whenever it exceeded the 
amount as which said encryption amount of data was specified, and uses to 
subsequent local communication links with said means as the description. 
[Claim 23] Said access point is the radio communications system according to claim 
21 carry out changing the encryption key which has a means clock the communication 
link time amount used for the local communication link between the access 
point-client terminals concerned, and a means check the existence of a local 
communication link, performs in modification processing of after termination of a local 
communication link of 1 communication-link frame unit and an encryption key 
whenever it goes through the time amount as which said encryption communication 
link time amount was specified, and uses to subsequent local communication links 
with said means as the description. 

[Claim 24] According to modification of said encryption key, said access point is a 
radio communications system according to claim 22 or 23 with which the index 
number of the encryption key notified using said beacon frame is characterized by 
making it follow in footsteps and change to the encryption key which said access point 
is using. 

[Claim -25] 24 is [ claim 21 characterized by -having a means to add the warning 
information for notifying trouble generating, and to transmit on said beacon frame, and 
said access point notifying the purport that the key information for said encryption 
went wrong to said client terminal the failure case at steady modification of an 
encryption key at read-out, using said beacon frame from said removable storage 
thru/ or ] the radio communications system of a publication either. 
[Claim 26] Said client terminal is a radio communications system according to claim 

24 characterized by having the means which reads the index number of the use 
encryption key on the received beacon frame, and for the key information for data 
encryption coming to hand from said storage according to modification of the index 
number concerned, and performing a communication link data encryption. 

[Claim 27] Said client terminal is a radio communications system according to claim 

25 characterized by performing an alarm display to said terminal user when it has the 
means which reads the information on the purport that steady modification of 
encryption on the received beacon frame went wrong, and a means to perform an 
alarm display to the client terminal user concerned and said failure is detected. 



[Claim 28] The radio communications system according to claim 16 to 27 
characterized by a radio medium being wireless LAN. 

[Claim 29] The radio communications system according to claim 16 to 27 
characterized by a radio medium being the enclosure of PHS. 

[Claim 30] The radio communications system according to claim 16 to 27 
characterized by a radio medium being Bluetooth. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the radio communications system 
which strengthens the security to a radio wire-tapping person using autonomous 
modification of the encryption key especially used for a communication link data 
encryption, and its control approach in the local communication network which used 
for example, the radio medium about the communication system and the encryption 
approach of performing an encryption communication link. 
[0002] 

[Description of the Prior Art] There are a thing of the independent method which 
consists of only wireless terminals by which peer to peer connection was made, and a 
thing of the infrastructure method which constitutes a service area (basic service set) 
from one access point and a wireless terminal, and is constituted by making cable 
connection of two or more access points, and connecting in wireless local 
communication system, such as the conventional wireless LAN system. The system 
by the latter method is equipped with the access point which has a radio function for 
connecting with Cable LAN from a client terminal and client terminals, such as a 
personal computer equipped with the radio function. In such a system, it is wireless 
between client terminals and it communicates via an access point to Cable LAN. In 
radio, since the contents of a communication link can be monitored, it is necessary to 
perform an encryption communication link for informational secrecy. Therefore, the 
encryption key information used by the basic service set of the radio concerned must 
be shared in one service set. The encryption key information used by the service set 
was set up in the client terminal equipment which constitutes communication system, 
and the initialization process phase of an access point. 
[0003] 

[Problem(s) to be Solved by the Invention] However, an encryption communication 
link is monitored in the above-mentioned conventional example, and it is possible to 
presume the encryption key used in the communications area which wireless local 



communication system monitored from the monitored encryption signal. In recent 
years, the throughput of information management systems, such as a personal 
computer, especially improves, and presuming an encryption key from the monitored 
encryption signal using the cheap device which generally spread can carry out now 
comparatively in a short time. Therefore, after the initialization process of wireless 
local communication system, when encryption data communication is continued using 
the same encryption key, without performing resetting of an encryption key, also after 
a wire-tapping person specifies an encryption key, the communication link will be 
continued using the encryption key, and the situation where the contents of the 
encryption communication link will be decoded by the wire-tapping person may also 
be produced. 

[0004] In view of the above-mentioned conventional example, accomplished this 
invention, and it makes it possible to change autonomously the encryption key used in 
the wireless area which the access point concerned generalizes by initiative of an 
access point By furthermore, the thing for which the cryptographic key related 
information transmitted through a wireless circuit is limited to an encryption key and 
the index information to which it was made to correspond Acquisition of an encryption 
key [ / in addition to the client terminal which does not have cryptographic key 
information ] is made difficult, and it aims at offering the radio communications system 
which raised information safety, and its control approach. 

[0005] Furthermore, the terminal which permits access, and the terminal which does 
not permit access can be visually identified by storing correlation with encryption key 
information and an index number in a removable storage, and it aims at offering the 
radio communications system which raised information safety, and its control 
approach. 
[0006] 

[Means for Solving the Problem] In order to attain the above-mentioned purpose, this 
invention consists of the following configurations. 

[0007] A storage means to be the radio communications system which connects a 
terminal and an access point by radio, to prepare for each of said terminal and access 
point, and to memorize an encryption key identifiable with an index, In a distribution 
means to distribute the index of the encryption key determined as what is used in said 
access point to said terminal, and said terminal The encryption key identified by the 
index distributed from said access point is read from said storage means, and it has a 
means to register as an encryption key to be used. 

[0008] Said storage means contains still more preferably the storage which can be 
detached and attached freely to said terminal and access point. 

[0009] The encryption key used whenever the amount of data which communicates 
between said access points and terminals reaches constant value in said access point 
still more preferably is newly determined. 



[0010] Still more preferably, whenever it carries out fixed time amount progress in 
said access point, the encryption key to be used is newly determined. 
[001 1] Or other side faces of this invention consist of the following configurations. 
[0012] It has a storage means are the radio control unit connected with the terminal 
by radio, and memorize an encryption key identifiable with an index, a key decision 
means determine the encryption key to be used, a means register as an encryption 
key used for the determined encryption key, reading from said storage means, and a 
distribution means distribute said determined index of an encryption key to said 
terminal. 

[0013] Said storage means contains still more preferably the storage which can be 
detached and attached freely. 

[0014] Said key decision means newly determines still more preferably the encryption 
key used whenever the amount of data which communicates between said terminals 
reaches constant value. 

[0015] Said key decision means newly determines still more preferably the encryption 
key used whenever it carries out fixed time amount progress. 

[0016] Or other side faces of this invention consist of the following configurations. 
[0017] It is the terminal unit connected with the radio control unit by radio, and the 
encryption key identified by storage means to memorize an encryption key identifiable 
with an index, and the index distributed from said radio control unit is read from said 
storage means, and it has a means to register as an encryption key to be used. 
[0018] Or other side faces of this invention consist of the following configurations. 
[0019] It is a radio communications system including the access point connected to 
the wire net, and has the storage with which said client terminal and the device of the 
both skies of said access point were equipped, a means to match the key information 
for data encryption with an in DEKKUSSU number, and to memorize it in said storage, 
and a means to return the key information for said encryption from said storage 
corresponding to the inquiry by said in DEKKUSSU number from said device side. 
[0020] 

[Embodiment of the Invention] It explains below [the first operation gestalt], referring 
to an attached document about the gestalt of operation of the encryption system of 
the wireless local communication link concerning this invention. 

[0021] In the encryption system of the wireless local communication link in this 
operation gestalt, whenever it makes wireless LAN (ISO8802.1 1 conformity system) 
into wireless local communication media, it uses the infrastructure mode of wireless 
LAN, using an IC card as a removable storage and the communication link of the data 
of the amount of conventions is performed on a radio medium, the key for encryption 
used by the wireless medium is changed automatically. 

[0022] Drawing 1 is a LAN structure-of-a-system conceptual diagram containing the 
wireless local communication system in this operation gestalt. Drawing 1 shows the 



condition of not performing data communication. The whole LAN system has the wire 
net (cable LAN) 10 which is a backbone communication network, and the wireless LAN 
system 1 1 which is a local radio network. The wireless LAN system 1 1 is constituted 
by an access point 100 and the client terminals 110, 120, and 130. The access point 
100 has the function as a control unit it not only to connect Cable LAN with wireless 
LAN, but to report the information shared by the terminal and access point in a basic 
service set to each terminal of a service set. 

[0023] moreover, an access point 100 and the client terminal 1 10,120,130 — each — 
IC cards 101, 111, 121, and 131 as a storage — it has the removable IC card adapter 
for each, this IC card 101,111,121,131 — respectively — being alike — it is 
collectively memorized by the index value to show the encryption key information 
used for encryption, and its encryption key information. At the time of 
cryptocommunication, the client terminal which performs an access point 100 and an 
encryption communication link is equipped with an IC card. 

[0024] An access point 100 transmits intermittently the beacon frame 1 2 for reporting 
area profile information to all the client terminals that carry out a ** area into wireless 
area with a fixed time interval by the broadcast formula in infrastructure mode. Area 
profile information is information which shows the profile (assembly of setting 
information) of the wireless area (basic service set) which an access point 100 
generalizes. With this operation gestalt, intermittent transmission is carried out 
including the key number (index value to show the value of a key) for the encryption 
(encryption according to the WEP method of ISO 8802.1 1) which an access point 100 
is using for the area profile information transmitted by the beacon frame 12. In 
addition, a WEP method is the option function of ISO 8802.1 1, and is a method which 
enciphers data in a MAC layer (MAC: media aecess control), attaches the data for 
media authorization codes, and checks the existence of an error or an alteration. The 
key used for this encryption is called a WEP key. 

[0025] Drawing 2 is the conceptual diagram showing the situation under data 
communication in the encryption system of the wireless local communication link in 
this operation gestalt. Frames 20 and 21 are encryption data communication frames 
by the renewal method of a dynamic WEP key used in the case of data communication. 
In addition, in this operation gestalt, whenever data communication of the amount of 
conventions is performed in area, the WEP key is updated. 

[0026] The functional block diagram of the wireless LAN function part of the wireless 
LAN client terminal of this operation gestalt is shown in drawing 13 . 
[0027] The wireless section 1301 manages transmission and reception. The baseband 
processing section 1 302 manages the strange recovery of a signal. The MAC control 
section 1303 manages coding, a decryption, and timing management of data. A control 
section 1304 manages the control more than a frame level. The memory for work 
areas in RAM! 305 and ROM1306 are memory which stores a control program. The IC 



card interface section 1307 offers the electric mechanical interface for writing data in 
IC card 1309, and reading data from IC card 1309. The index value the information 
element of a WEP key and for each information-element selection is related with IC 
card 1 309, and it memorizes inside (refer to drawing 6 ). The application interface 
section 1308 offers an interface with other components in the client terminal which 
communicates using a wireless LAN function part. 

[0028] The functional block diagram of the wireless LAN access point of this 
operation gestalt is shown in drawing 14 . 

[0029] The wireless section 1401 manages transmission and reception. The baseband 
processing section 1402 manages the strange recovery of a signal. The MAC control 
section 1403 manages coding, a decryption, and timing management of data. A control 
section 1404 manages the control more than a frame level. The memory for work 
areas in RAM 1405 and ROM 1406 are memory which stores a control program. The IC 
card interface section 1407 offers the electric mechanical interface for writing data in 
IC card 1409, and reading data from IC card 1409. The index value the information 
element of a WEP key and for each information-element selection is related with IC 
card 1409, and it memorizes inside (refer to drawing 6 ). The cable LAN interface 
section 1408 offers the interface of an access point and Cable LAN. 
[0030] The example of a format of the beacon signal of wireless LAN (ISO8802.11 
conformity system) is shown in drawing 3 . A beacon signal is a signal used in order for 
broadcasting to report the information on area to all client terminals from an access 
point in infrastructure mode. The field appointed by the MAC header 301 and time 
stump 302 in which it is shown that it is the frame of a media-access-control (MAC) 
layer, the capability information 304 grade of two octets mentioned later, and 
specification is defined as the format of drawing 3 . 

[0031] Drawing 4 is drawing showing the contents by which the capability (capability) 
information 304 included in the beacon signal of drawing 3 was standardized. A bit 5 to 
the bit 15 is a spare bit. 

[0032] The example of a format which extended the capability information 304 on the 
beacon signal in the wireless LAN (ISO8802.1 1 conformity system) of this operation 
gestalt to drawing 5 is shown. With this operation gestalt, it sets as a cryptographic 
key number 506 for the index value corresponding to a WEP key while it is 1 1 bits from 
which operation is suspended as reserve area 406 on the beacon frame signal for the 
capability information 304 which consists of two octets and an access point is using 6 
bits of a bit 5 to the bit 10 to be well-known to the client terminal in a basic service 
set. 64 kinds of WEP keys can be specified by the cryptographic key number 506. 
Furthermore, it is determined as the warning bit 507 for notifying that the fault on the 
employment by the side of an access point (WEP key information cannot be read from 
an IC card) has produced the bit 1 1 of the reserve area 406. Remaining 4 bits is 
reserved as reserve area. 



[0033] Drawing 6 shows the example of the key information registration table stored 
as WEP key information in the IC card, when the data length of the WEP key 
information on wireless LAN is 40 bits in this operation gestalt. The index value (1-64) 
** table of the cryptographic key number 506 is corresponded and carried out to a 
WEP key, and the 40-bit actual WEP key information 601-664 is memorized by the IC 
card corresponding to the cryptographic key number. And the IC card has the function 
to return the WEP key information corresponding to the inputted index value, to the 
input of an index value. This function is carried out by performing the program stored 
in the memory in which this was also built by the processor built in the IC card. 
[0034] Drawing 7 and drawing 8 are the mimetic diagrams of the logical file structure 
in an IC card. Among these, drawing 7 is an example which mounted ID (AID) for 
discernment of the most significants 700-DFs 720 by the method assigned for every 
service vendor. Drawing 8 is an example which mounted ID (AID) for discernment of 
the most significants 800-DFs 820 by the method assigned for every types of 
services. Anyway, it memorizes with the storage gestalt shown in the storage area in 
EF KEYINFO72001 and 82001 of drawing 7 and drawing 8 at drawing 6 . Therefore, an 
IC card can acquire and output the WEP key information corresponding to the index 
value which followed this logical file structure and was inputted with reference to the 
key information registration table, when an index value is inputted. 
[0035] The modification approach of the WEP key in a Modification procedure of 
WEP key> wireless LAN system is explained using the sequence chart of drawing 9 , 
and the processing flow chart of the access point of drawing 10 and the processing 
flow chart of the client terminal of drawing 1 1 . This operation gestalt shows the 
example which uses that the amount of data which communicates through a wireless 
access point exceeded the amount of conventions as a trigger of WEP key 
modification. An access point 100 integrates the communication link amount of data 
between the client terminals in a service area using a counter etc., whenever 
transmission and reception of data occur, and it measures it with the amount of 
conventions defined beforehand. In addition, the amount of data can be performed 
only within data transmission or reception. 

[0036] And as shown in drawing 9 , when it judges with the amount of data with which 
the wireless access point 100 communicates through it having exceeded the amount 
of conventions, the processing shown in drawing 10 is started in the wireless access 
point concerned. 

[0037] First, the counter which counts the transmission amount of data integrated by 
current is cleared (1001), and the cryptographic key number (index value 
corresponding to a WEP key) to change is chosen by the predetermined operation 
(1002). How to make an index the remainder which generates the approach and 
random number which add 1 to the last key number for example most simply as an 
operation for determining an index value, and makes the 64 law etc. can be considered. 



An important point is for the last key number to be made not to be chosen again. 
Moreover, even if it allows selection for the second time, a key number needs to be 
determined so that an encryption key may be changed at sufficiently short spacing to 
time amount required in order to presume an encryption key from a 
cryptocommunication sentence. The communication link amount of data (it is 
hereafter called the trigger amount of data) used as the trigger of key modification 
also needs to be determined from this viewpoint. 

[0038] If a cryptographic key number is determined, an access point 100 will publish 
the WEP key information requirements which added the cryptographic key number to 
IC card 101 with which it is equipped (1003). The WEP key information response which 
added the WEP cryptographic key information over the specified cryptographic key 
number with IC card 101 which received WEP key information requirements is 
returned. 

[0039] An access point 100 judges whether it is during current data communication a 
reception beam case (1004-Y) normally about a WEP cryptographic key information 
response (1005). If it is during data communication, queuing will be performed till 
termination per 1 data communication. If it is not during data communication, it will 
change into the WEP cryptographic key information that the encryption key (key of 
WEP) to be used from now on was received from said IC card, and the warning bit for 
alarm displays will be cleared (step 1006). And a new cryptographic key number (index 
value corresponding to said WEP key) and a warning bit are set, and it notifies to the 
capability information on a beacon frame by broadcasting to the client terminal in area 
(step 1007). 

[0040] On the other hand, a time-out etc. is produced, and normally, when there is no 
reception eclipse (1004-N), the warning bit for alarm displays is set for a response 
(1008), a cryptographic key number (index value corresponding to said WEP key) and a 
warning bit value are set to the capability information on a beacon frame, and it 
notifies by broadcasting to the client terminal in area (step 1007). In this case, what is 
necessary is just to set the current value as it is, for example, since a new 
cryptographic key number is not obtained. In addition, what is necessary is just to set 
the cryptographic key number currently used as it is as cryptographic key information 
506 about the beacon frame transmitted when the amount of data has not reached 
default value. Or it can also be shown that the cryptographic key number is not 
changed by displaying the purport which does not have modification of a cryptographic 
key, for example by the cryptographic key number 0 etc. 

[0041] Next, actuation of the client terminal 1 10 which received the beacon frame is 
explained with reference to drawing 1 1 . In addition, actuation with any same client 
terminal is performed. 

[0042] The client terminal 1 10 judges whether the warning bit is set from the received 
beacon frame by reading "cryptographic key number" 506 within capability 



information, and "warning bit" 507 (1101) (1102). If set, the alarm display of the 
purport by which a key was not updated in the client terminal will be performed (1 107), 
and one batch will be ended. On the other hand, if the warning bit is not set and 
modification is not detected with reference to "a cryptographic key number (1103)", 
one batch is ended as it is. 

[0043] When modification of a "cryptographic key number" is detected (1103), to IC 
card 111 with which it is equipped, the client terminal 101 adds a cryptographic key 
number, and performs WEP key information requirements (1104). As an index value 
corresponding to WEP key information for the specified cryptographic key number, IC 
card 1 1 1 adds cryptographic key information (WEP cryptographic key information), 
and returns a WEP key information response. 

[0044] The client terminal 101 judges a WEP key information response in a reception 
beam normally (1105), and if it receives normally, it will change it into the WEP 
cryptographic key information that the encryption key (key of WEP) to be used from 
now on was received from IC card 111. 

[0045] On the other hand, normally, when there is no reception eclipse (1105-N), an 
alarm display is carried out for the WEP key information response from IC card 1 1 1 to 
the client terminal 101 (1 107), and one batch is ended. 

[0046] Actuation of the IC card connected to the access point, the client terminal, 
and each of a more than is shown in drawing 9 . In drawing 9 , the access point has 
transmitted the beacon signal periodically to the client terminal in a service set 
(broadcast transmission). And if the communication link amount of data after changing 
a WEP key finally after beacon signal 901 transmission exceeds constant value, the 
WEP key information requirements 903 will be published to the IC card which 
determined a cryptographic key number new as a WEP key modification trigger 902, 
and was connected in it in the access point, a cryptographic key number will be 
notified, and it will wait for the reception of the WEP key information response 904 to 
it. If the WEP key information response 904 is received, it will set up that the WEP key 
information included in the WEP key information response should be used making it 
into a new cryptographic key, the cryptographic key number newly determined as the 
cryptographic key number field of the beacon signal 905 will be set up, and broadcast 
transmission of the beacon signal 905 will be carried out. At a client terminal, if a 
beacon signal is received, a setup according to the signal included there will be 
performed, but if a cryptographic key number has modification especially, the WEP key 
information requirements 907 will be published to the IC card connected to the client 
terminal, a cryptographic key number will be notified, and it will wait for the reception 
of the WEP key information response 908 to it. If the WEP key information response 
908 is received, a client terminal will be set up that the WEP key information included 
in the WEP key information response should be used making it into a new 
cryptographic key. 



[0047] The above processing enables it to update the key for encryption (WEP 
cryptographic key) autonomously during network employment by making an excess of 
a default of the communication link amount of data on a wireless LAN medium into a 
trigger. For this reason, it becomes possible to raise the security to the interception 
of communications by third persons, such as a wireless LAN client which does not 
hold the IC card for a service set concerned. Moreover, the improvement in security 
about access to the network by the third person without authority is also attained at 
coincidence. 

[0048] Especially distribution of the key information from an access point to each 
terminal is performed in the form of distribution of a cryptographic key number, and 
the WEP key information itself is not distributed. Therefore, in the terminal which does 
not hold the IC card currently used for key management in this operation gestalt, it 
becomes impossible to monitor distribution of the key information itself and to specify 
a key, and improvement in much more security can be aimed at. 

[0049] Moreover, it becomes possible to change a WEP key quickly simple, the special 

procedure for key distribution becoming unnecessary, and securing security by 

including a cryptographic key number in a beacon signal, and distributing it. 

[0050] Furthermore, since key information is managed with the IC card, security can 

be further raised by exchanging the IC card itself for the IC card holding new key 

information. 

[0051] Furthermore, with this operation gestalt, since spacing which changes a WEP 
key is set up by the communication link amount of data and can be set, exchange of 
data can change a WEP key frequently in a frequent service set. 

[0052] The example which uses for [operation gestalt of ** second] drawing 12 
deadline of "the same WEP key duration timer" clocked in a wireless access point as 
a trigger (902 of drawing 9 ) of WEP key modification is shown. 

[0053] When "the same WEP key duration timer" passes the deadline of in the 
wireless access point 100, the processing shown in drawing 12 is started in the 
wireless access point concerned. 

[0054] First, the cryptographic key number (index value corresponding to a WEP key) 
which changes "the same WEP key duration timer" to current by the predetermined 
operation after initializing (1201) is chosen (1202). The same WEP key duration timer 
is realizable using the timer with which the control section 1404 of drawing 14 is 
equipped. Moreover, the restart of the timer is immediately carried out after 
initialization. 

[0055] An access point 100 publishes the WEP key information requirements which 
added the cryptographic key number (index value corresponding to a WEP key) to IC 
card 101 with which it is equipped (1203 903). 

[0056] IC card 100 returns the WEP key information response to the specified 
cryptographic key number (index value corresponding to a WEP key) which added 



cryptographic key information (information on a WEP key) to an access point 100 
(904). 

[0057] It changes into the cryptographic key information which the access point 100 
judged whether it was during current data communication a reception beam case 
(1204-Y) normally about a WEP key information response (1205), performed queuing 
till termination per 1 data communication when it was during data communication, and 
received the encryption key (key of WEP) to be used from now on from IC card 101 
when it was not during data communication, and the warning bit for alarm displays is 
cleared (1206). 

[0058] The key number number (index value corresponding to a WEP key), warning bit 
which the warning bit for alarm displays is normally set for a WEP key information 
response when there is no reception eclipse (1204-N) (1208), and are correspondence 
information on the other hand A value is set to said beacon frame and it notifies by 
broadcasting to the client terminal in area (905 1 207). 

[0059] Also in the wireless LAN system of the client terminal indicated to be the 
access point which performs control shown in this operation gestalt by the above 
processing with the 1st operation gestalt combined and boiled By making into a trigger 
deadline of "the same WEP key duration timer" clocked in an access point 100 It 
becomes possible to update the key for encryption (WEP key) autonomously during 
real employment, and it becomes possible to raise the communication link security to 
wire tapping of a third person called the wireless LAN client which does not hold the 
IC card for a service set concerned like the first operation gestalt. 
[0060] Moreover, if same WEP key duration is made programmable, according to the 
improvement in the engine performance of the processor used for refinement and 
cryptographic key decode of the cryptographic key decode approach, security is 
maintainable by shortening the same WEP key duration. 

[0061] Moreover, since a simple and quick WEP key can be changed by not distributing 
the key itself but distributing a key number,' even if it sets up spacing which changes a 
key for a short time, the processing processing delay resulting from it can be 
controlled. Therefore, the frequency of key modification can be raised and the 
resistance over security **** can be raised. 

[0062] Furthermore, with this operation gestalt, since spacing which changes a WEP 
key is set up by time amount and can be set, modification of the key for every fixed 
time amount can be guaranteed. (Other operation gestalten) In said operation gestalt, 
the example which changes periodically the cryptographic key for enciphering the data 
transmitted as a wireless medium for local radio communications systems on the radio 
circuit at the time of using the infrastructure mode of the wireless LAN system of 
8802.ISO11 conformity was shown. However, the application to the local radio 
communications system PHS with which it consists of one access point and two or 
more clients, and the information about the wireless area concerned is regularly 



reported from an access point even except the infrastructure mode of the wireless 
LAN system of 8802.ISO1 1 conformity, for example, premises, Bluetooth (Blue tooth), 
etc. is possible. 

[0063] Moreover, in said operation gestalt, although the IC card is used as an 
encryption key (WEP key) information storing module, even if it uses other storage 
modules, such as a PC card, the same effectiveness is acquired. 
[0064] Moreover, although management of a key is performed by the IC card with the 
above-mentioned operation gestalt, an access point and each of each client terminal 
may be the configurations of managing a key. In this case, security can be further 
raised by adding the sequence which transmits a WEP key from an access point to 
each terminal. 

[0065] Moreover, the amount of data which serves as a trigger of WEP key 
modification in the 1 st operation gestalt may be the amount of data set as the object 
of encryption, and may be the amount of data of the whole data transmitted and 
received. 

[0066] In addition, even if it applies this invention to the system which consists of two 
or more devices (for example, a host computer, an interface device, a reader, a printer, 
etc.), it may be applied to the equipments (for example, a copying machine, facsimile 
apparatus, etc.) which consist of one device. 

[0067] Moreover, the purpose of this invention supplies the storage (or record 
medium) which recorded the program code of the software which realizes the function 
of the operation gestalt mentioned above to a system or equipment, and is attained 
also by reading and performing the program code with which the computer (or CPU 
and MPU) of the system or equipment was stored in the storage. 

[0068] Jn this case, the function of the operation gestalt which the program code itself 
read from the storage mentioned above will be realized, and the storage which 
memorized that program code itself and program code will constitute this invention. 
[0069] Moreover, by performing the program code which the computer read, a part or 
all of processing that the operating system (OS) which the function of the operation 
gestalt mentioned above is not only realized, but is working on a computer based on 
directions of the program code is actual is performed, and also when the function of 
the operation gestalt mentioned above by the processing is realized, it is contained. 
[0070] Furthermore, after the program code read from the storage is written in the 
memory with which the functional expansion unit connected to the functional 
expansion card inserted in the computer or the computer is equipped, a part or all of 
processing that CPU with which the functional expansion card and functional 
expansion unit are equipped is actual performs, and also when the function of the 
operation gestalt mentioned above by the processing is realized, it is contained based 
on directions of the program code. 
[0071] 



[Effect of the Invention] As explained above, according to this invention, in wireless 
local communication system, it becomes possible to change autonomously the 
encryption key used in the wireless area which the access point concerned 
generalizes by initiative of an access point. Moreover, since the cryptographic key 
related information transmitted through a wireless circuit is limited to the index 
information for storage access connected to the terminal, except a client terminal 
with a storage [ finishing / the cryptographic key information storage concerned ], it 
becomes difficult for actual encryption key information to come to hand. For this 
reason, it leads to improvement in the information security in the data communication 
in wireless local communication system. 

[0072] Moreover, since correlation of encryption key information and an index number 
is stored in a removable storage, it becomes possible to make the access propriety of 
a client terminal equipment identify visually according to the wearing condition of a 
storage. 

[0073] Furthermore, since correlation of encryption key information and an index 
number is stored in a removable storage, improvement in the security about access to 
the network by the third person without authority is attained. 

[0074] Furthermore, since a cryptographic key number can be distributed without a 
special procedure to each terminal, it becomes possible to change a key quickly 
simple, securing security. 

[0075] Furthermore, since it has managed with the storage which can detach and 
attach key information freely, security can be further raised by exchanging the 
storage itself for the storage holding new key information. 

[0076] Furthermore, since spacing which changes a key is set up by the 
communication link amount of data and can be set, exchange of data can change a key 
frequently in a frequent service set. 

[0077] Moreover, if modification of the time interval which changes a key is enabled, 
according to the improvement in the engine performance of the processor used for 
refinement and key decode of the key decode approach, security is maintainable by 
shortening the time interval. 

[0078] Moreover, since a simple and quick key can be changed by not distributing the 
key itself but distributing a key number, even if it sets up spacing which changes a key 
for a short time, the processing processing delay resulting from it can be controlled. 
Therefore, the frequency of key modification can be raised and the resistance over 
security **** can be raised. 

[0079] Furthermore, modification of the key for every fixed time amount can be 
guaranteed by setting up spacing which changes a key by time amount. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] The cipher system structure-of-a-system conceptual diagram of the 
wireless local communication link in an operation gestalt 

[Drawing 2] The cipher system structure-of-a-system conceptual diagram of the 
wireless local communication link in an operation gestalt 

[Drawing 3] Drawing of the beacon frame format of an ISO8802.1 1 conformity system 
[Drawing 4] Drawing of a beacon frame top capability information format of an 
ISO8802.11 conformity system 

[Drawing 5] Drawing of the extended example of a format of the capability information 
in an operation gestalt 

[Drawing 6] Drawing of the example of a WEP key information-element registration 
table of an operation gestalt 

[Drawing 7] Drawing of the example 1 of a logical format configuration on the IC card 
of an operation gestalt 

[Drawing 8] Drawing of the example 2 of a logical format configuration on the IC card 
of an operation gestalt 

[Drawing 9] Drawing of the example of a modification sequence chart of the WEP key 
of an operation gestalt LAN system 

[Drawing 10] The WEP key modification flow chart of the wireless LAN access point of 
the 1st operation gestalt 

[Drawing 1 1] The WEP key modification flow chart of the wireless LAN client terminal 
of an operation gestalt 

[Drawing 12] The WEP key modification flow chart of the wireless LAN access point of 
the 2nd operation gestalt 

[Drawing 13] The functional block diagram of the wireless LAN client terminal of an 
operation gestalt 

[Drawing 14] The functional block diagram of the wireless LAN access point of an 
operation gestalt 
[Description of Notations] 

10 Wire Net (Cable LAN) 

1 1 Local Radio Network (Wireless LAN) 

1 2 Beacon Frame 

20 Data Frame Enciphered with Dynamic WEP Key 

21 Data Frame Enciphered with Dynamic WEP Key 

100 Access Point 

101 IC Card (WEP Key Table Storing) 
1 10 Client Terminal 



111 IC Card (WEP Key Table Storing) 

120 Client Terminal 

121 IC Card (WEP Key Table Storing) 

130 Client Terminal 

131 IC Card (WEP Key Table Storing) 

1301 Wireless Section 

1302 Baseband Section 

1303 MAC Control Section 

1 304 Control Section 

1305 RAM 

1306 ROM 

1307 IC Card Interface Section 

1308 Application Interface Section 

1309 IC Card 

1401 Wireless Section 

1402 Baseband Section 

1403 MAC Control Section 

1404 Control Section 

1405 RAM 
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1407 IC Card Interface Section 

1408 Cable LAN (Communication Network) Interface Section 
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tk l a n mefl%«iffi l ra«*fT r> 1 9 >r r > f *£* 

[00 2 8] il 4^, *H**tt©«tl«LANr*-fe 

xw>h«yp >y 

[0029] mmm> 1401 liaise*^*., ^-x^ 

V KjfflJIgP 1 4 0 2 lift^OgttW&RJSo MACny 
Fn-zl/gBi 4 0 3tt-r— *ORF#fk • mmtRUZ* 
^>ySi*Rl5o »JfBSI5l 4 0 4«7b- 
±<£>SJt9£rn]£o RAMI 4 0 5li7-^x>J7ffiW 
ROM 1 4 0 6Wlffiiyn^7AmW?.^ : e 
UTftfto I C#— hV^7x-X«l 4 0 I 
C*— Kl 40 9»C-r— SfclCfc-K 

1 4 0 9^6^-^*K*aj-r«:«>o*aw««w-<> 

:7.x— xsruet-rso 1 C#-K 1 4 0 91C& X W 

SiLANY>^-"7x-XgPl 4 0 8t±, T*-trX# 
^>h^«LANt^^-7x-X%i«tSo 
[0 0 3 0] H3lCittLAN (IS08802.11*PfflS/X'r 

z.) £)tr— nvft^o^^— v*y hfi?ij^*r 0 tr— n> 

mm*. ^>77Xh7^f+ : e- F^£>i^t, r^-fe 
X^yh^5itO*7^7> FJS^tc^D- F** 

@3(07t-T7ht:(t «if*7**-teXf|siJfflJ (M 
AC) ltO7U-m§Li:^tMAC^^3 0 
1 Jf>£>f AX^y^3 0 2. tSMiT^ 2*Ztv 

-/<i£'j^flWB3 0 4*. *«tc<fct>5£«>&nfc:7*f 
[0031] H4«, m3(D\£-ziymmc^^ti^ j r 

-^Uf-f (capab i I i ty) W $B 3 0 4 Oftttft: S tifc rt 
g^tiT^^o *f*y F 5^6 If *y F 1 5i;Tii^ffi! 
tf -y hi:4oT^o 

[0 0 3 2] IEI 5 td N *HfifiJB^oj»ta L A N (IS0880 
2. nrpfiav-X^A) tCfetj-S lf-n>f§^-CD^r-/^ 'J 
■r-^1f$B3 0 4^MU/c7^-V7 F^J^-To *H 
SSfl5ffiT«, tf-n U— Afl^iJc 2 *^r-y FT 
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VT4 0 6 kLT«ffl»ffitffi»ShT^5 1 lti^h 
lf>y h 5*6 If y h 1 0<D6 \£ y r^-fe 
htf?iJffl*<DWE P»(c**lSt* M>fy^ 
M^S*^--lfX-try M^O*^7> hi8*teJBSrr 

0 6lC«t!5. 6 4 1SOW E P8*»St 5 C fc^T't 
£o £6*C, ^ffixur 4 0 6<QfcT *y h 1 1 ^ Tt?-k 

x#'fyhmv<Dmm±v)^M t & ci c*-f*6we 

£fctf><BS£tf*y h 5 0 7 ^^*^o 4 b?>y h*^ 

[0033] H6«, ^mmmmic^rmmL an <d 

WE PaWffiO-r-^gtf 4 0 If -y FT'$5S^:, I 

c Krt»cwE PSifiWat LTtt»snri^*««iH 

5 0 6«WE P®c*fJSn^>f7^Xffl (1-6 
4) fiU W#«#^£fcfj£LT. nm<D40\?yb 
OWE P«1f?B6 0 1-6 6 4*fS«SnTl/>S 0 

v^xffitefcfes-rswE p««««rig2i"ra«fti* i c 

[0 0 3 4] H 713*^0 8 « I C*-FrtO»l7 7 

7 0 0-7 2 OOBJgiJfflO ID (AID) ^r+h-tTX^ 

H±fiD F 8 0 0-8 2 OOKBUfflO I D (A I D) * 
^-lfXfflgiJStC«iJST§7?^T^»L/c--0iJT^^o 
l^TftlCLTfe; EITfccfctfEISCDEF KEYINF07 2 0 0 
l**tf8 2 00 1) rtOB*xiJ7 F te, gl6tc^-riB 

<< >tv ^xMtc^fist-^ w e p»it m*mm Lx&ti 

[0 0 3 5] <WEP«©8I#)|>i«L AN^Xf 
i>fc*tt*WEP»<&«Kfrffi** H90S/--!rm 

> h £r:fr L Tiifl $ n § -r— * B*tt£S«fi]fl L 

c ttt\N e Pi^io h <; fjt UTfyffl-r*«*^-r 0 
z^tx^yh i o oc*. +r— ifxxu 7rto^^-Y 

»St5SS*»»*S«:ffl^Ta»L, *6*Ua63£ 
»6tifc*3£«i:Jt«'r*o **5-r-*«tt-r-^aifi 

[0 0 3 6] fLT, H9tc^*T^atC, MMKT^-b^ 



(6) ftR] 2003-258790 

^wvk* eii oic7jk*?mm&&mztiz>o 

[0 0 3 7] $?\ ISffi$TtcSa©'L/c{5^^-^ffl^ 

^^^hn^-^^^^'jzi (i ooi) , m&to 
mnic&o. ^mrzm^Mm^ (we psttc*f/s-rs 

-O-r-y^Xffi) «raJR-rs ( 1 0 0 2) 0 ^>-r*y^ 
70 f06 4*ffi^-r^fiJ^^VT r ^y^X^-r^)75-ffi^:^ 

n^r^ct ^id-r^c ^^fe^> 0 s/c, mcnmoimtR* 
irricLTt. Bg^3ffifi**6B8^ftat*«^-r5fea& 

-P) feC(0«^6J*^SnTl^^S^«So 
[0 0 3 8] Bg^H#^^^^n/c^6, 

1 0 0te. S»*tTcV« IC^-KIOICW 
20 LT, ^«##*^inbfcWEP«tS«B**5SfTf 
« (1 0 0 3) e WE P«f»«S**SfILfc I C*- 

Fionas *&3£sn«:B»#»##jc»-r*wE p 

•^«WB*f*taLfcWE PaifmS^iliM^tl^o 

[0 0 3 9] T^-trX^-TVh 1 0 0WE P0g-5f»1ff 
*ffi«*IEttfcSttttfci§^ ( 1 0 0 4 - Y) , jgffix 
-*il«*-e*S*>OW^*ffd (1 0 0 5) o 

m\M (WEPcogl) fcflfijEi C*-K<fct>S8*ofcW 
so E PBSfUMWcSit, »#a^fflO»ftlfy h£r* 
(Xr>y^l 00 6) o ^LT. 

-Aoy-/^tf u^-rflHBt, tffettivremrc («me 
-H^-vxh-riia-r* (xf7yi o o 7) 0 

[0 0 4 0] -75\ <?iJ^tf^^Ar«> h^H^^CT/S 
^*iEfirti:S^^6nftA^fe«'& (1 0 0 4-N) N 
W^fKfflCDW^^V h^7hb (10 0 8) , Bg^ 
St#^ (SulBWE PHcWKT«^>fy*X«) is J: 
^0 0»»lf -y hffi^rlf— nv^b-AO^r— /^tf U^^1f 
fgtc-tr^yhL, xi;rrt^^^-r7">h4S^tc^tLT7 r 
n-K*i-XhT*3HSrrS (Xf7yi 0 0 7) a CO 

ffj^tfBB^as^o^^^^a^^ftv^g* 

50 ^tCfctt'SSo 
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[004 1]<Wc, tf-n^b-AfcSdLfc* ^ 
r>h«&5fcl 1 O©i(H01 1 *#MLTiJJWT5o 

[0042] ^^-rr^his^i ioii, SfSLfcif- 

5 0 6*5<fcO' rg^e-y hA 5 0 7^tUL (1 
10 1), »£fcr-y htt-tv \~2tlX^Z>frmiZ-t2> 
(1 102). -fe-y h^nTU>nti\ ^^YT^hJS* 

(110 7), 1 ^S*ffi^rl?T-r?.o -73, S^tf-y 10 
(110 3), S-Mtf^fcUStl&tttuf, ^-(O^SlStt 

C0 0 4 3] nig^8i#*f j cos^^tti^n/i^^ 
(1103), ^7-rry 1 o n±, gtsnt 

1^5 I Ctj-KI 1 1 lc*tLT, Bg^S^^rf^DLT 
W E Pi!1f %mmtfto (1104). I Cfj— K 1 1 

$S) ^#*nLTWE PStt»fR^^3133i-r-Sc 20 

[0 0 4 4] ^•7-l'7'>']-iS*l 0 lt±, WEPiltiHS 
JS^IE^C^WtfcfrfiJ^L (110 5), IE#t§ 

mLrc*tb^mm-tz>B§mtM (wepoid c 

*-Kl 1 1 J:0§K-3ftWE PBi^SitI$Stc^M-r 

[0 0 4 5] — 7j I C#-K 1 1 1 frZOWE PHIffB 
l£g%IES{c§tttf5*i£frofcif£- (1 10 5- 
N) , 7^7->bffi3fcl 0 1 KBtt&jJVfcfT^ (1 1 

07), i «ia#te*«7"r*o 

10 0 4 6] lX±(DT-!7-tX#^>Y~33J:U : -!75"fT> 30 

h4S**3«fctf^n^titc«Msnfc i c Koftft* 

i9tiLtv^o 09»c*5V>Tfi, T^-feXtfi'^h- 

fc^LT^wtciUfi (ttasasffi) ltvSo fir, 
tf-n>M^9 o i mmmc mmcv/E p8%sml 

E Ptl^M h U 7J"9 0 2 i: LT$lr/i&Bg*§It#^;£ftj£ 
U 7^-bXj)?^vHi:g|Ssnft I C#— FtcfcfLT 

we pmmm.m&9 o 3*$mt Lrm^mm^mm 

U ^tllcW-rsw E PSt1t$HfS^F9 0 4 £Q§{i 40 
0 0 WE PK1R*H£&9 0 4£r§ftLfc&e>, ^CDWE 
P«1*«l£;«FK:#i;*i*WE P81ftffi*«rfc&QH?82: 
LTffifflf^&JgU 0 5£DBg^S|S 

lf-n>fi^9 o 5 J&SStiM^fl-r^o ^-rr > hiS* 

fc, ^^TVh^fcKS^nfc I C#— KtCfcfLT 
WE Pgt1f*fig;£9 0 7*«fxLTWHt«*^*aftI 

l, tncwtswE putt *u&8 9 0 8 vsmttm so 
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Co WE PttNHB£S9 0 8*gf§Lfc&e>, f©WE 
PM«IIUS«Fte*$ttSWE P«««*S»fcftBB#8li: 

[0 0 4 7] W±OftlSlcJ:D, »*L A N(Kft:±©ai 

fi^-^itoK^ffi-aji^ h y #t lt, mmtmcom 

(WEPBg*§i|) *-yH7-^OIffltfi:, 
■fe-y hm I CA-K^Ul«LAN^7^7> 

#{;:<*: 5 h"7— 4"\cOT7-trX{coi^TCD-t:^;i V 

[0 0 4 8] t$tC, T^-tX^>b^P>§«5tc'\(08l 
1fffS<OBE€«, Bg^#-^o|Sff t^dff^Tlf^n, W 
E P««ffi^cDfc<0#I2«£*i5c:i:{±J5:v\, 

[0 0 4 9] Sfc, tf-n :/jl^lc$*-l* 

-b+a. 'JT--<^r5ifSL.-Z)OWE PiOgMffiS 

[0 0 5 0] 26lc, Stiffs I C*— F^;: 5 fcy ! g^lL 
T<,>3;^ci&^c, I C*-K*©tO*«ffeft««««r« 
#Lfc I Cfc-FtagSTSilfcT-. — JUr^a. 'J -r-f 

[0 0 5 1] ^fi&JgJiT'fci:, WEPgl^H 

— £ 0^*^«SK%+>-— X-fe -y Mc t3t>Tf±®5Ktc 
WE P84gIt5CttfTiS«. 

[0052] [m-<Dmmmmi m 1 2 1. mmr^-t 
x^Y>ncTtfB#$ns "ibj— we pa«8iBEB$s^-r 

V" (D^-YAT-yT 8 ^, WEP«^lOh'J^ (09© 
9 0 2) i: LT?<Jffl-rSW^-r o 
[0 0 5 3] ISTi'tX^'Oh 1 0 OtCT "(a)— W 

e PS!8M£B$F.32-f v" ffjtsfAyvfifttfgi. ^mm. 
t&Ttr-tXtf-O hTii, 0 1 2tc^-TS!liI^i!j5n 

So 

[0 0 5 4] S-f, ^ffiST*© "ID-WE PStlMX^rRB 
f-fv" *«j»Wb (12 0 1) Lfctt, 

y, &m?%Bmmms§ (WEPitMts-Tvf-; 

^Xfl) co^J&fTd (1 2 0 2) o Ir]— WE PgPBiBt 
BtW^-r-Vfi:, 01 4<DSiJ®g|5l 4 0 4 ffljim ^fT 

tcsx^-h^ns. 

[0 0 5 5] 7^«Wy|- 1 OOli, gf?nt^ 
5 I C*-F 1 0 1 fC#LT, Bg^-g#^ (WE PMK. 

%W\7-?% (1 2 0 3, 903). 
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[0056] ica-Fioott, mmztirzm^ms 
# (we pmiziii&-?z>'f>Tv ^xfi) icitra, m 

WIM (WE PgiOlfMS) *«JnbfcWEP«flWBB 
S^7^^X^>f> 1 0 OtCig^-T^ (9 0 4) o 

[0 0 5 7] T^-trX*^ >h 10 0^ WE Pfilfffi 
JCSfcjEWcSttttfcW^ (1 2 0 4-Y) > Siftx- 
*m®q*T*&2>fr(Dmfe&'f7^'{l 2 0 5), *ii 

Si (WE PCOSI) * I C*-K 1 0 1 <fct>§fl&ofcHf# 
( 1 2 0 6) o 

[0 0 5 8] — WE P«1f«lS»*jE«tC*Wtt6 

n**>ofc»^ (120 4-n) . fgg^(Dfse i 
7h^7hid 2 0 8), ttffiimrc&sa*** 

^ (WEP»z:*fjS:-r«^>-r^*xtf) , setr-yh 

> h«*tc^bT^D- f**x h-eam-r* 

(9 0 5, 1 2 0 7) o 

[0 0 5 9] &L±<Dmm\C& *H«je«te3SLfc*J 
tcfe^Tfc* T^-feXtf-TVh 1 0 OlCTifBfSn* 

«raftffi<o* (wEPSt) *is3i/fl* 

ft t/^fitfft LAN^7^7>hi:^o fcSI=#<D^lC*J 
[0 0 6 0] Sfe, fWJ-WE Pgtmit^^7 P a^ J L 

»cflBffl«ti*«att«©tt«^i±»cj6i:r, (wi-wep 
[0061] ■s#«EA«f. mmmtME-t 

[0 0 6 2] **fififlg!B-eti, WEPt*SI 

/xfflOjR»«t*i: UT, IS08802.11^jjffl(D^L ANy 

0i^st^«awtc^s*r5fl?"j*^L/'co u*>u isosso 

2.1WttOfctt*L AN^XfAWy77X F^^* 



(8) #^2 0 0 3-2 5 8 7 9 0 

UlyXfA, PI^WirtPH s^r^-h*— x(Biu 

[0 0 6 3] $fc, fflE***»K:*^Ttt* Hg^ftit 
(WEPi) ««««^-^i:LT I C*-F*rf'J 

[0 0 6 4] £/c, ±IS*flS««T?tt, gt<DW*it2: I C 

oty^o coi^tcti, r*-bx*-f >h^6*JS 
3*tc*fLTWE P«*a3S«-r*^— 5r>^*W4n"r5c: 

[0 0 6 5] £/c> »H6J[0B**Cj3O>TWEP«aM 
[0 0 6 6] ftfc, ffiftOttgg («l*tf*X 

ft£) tcafflLTt±l/>o 

[0067] syt, *»w<oawti, maLfcxam 
(Sfc^cpu^MPu) mmmmcmmznrc^u? 

[0 0 6 8] CtDif^ E««ft:fr6il*tH*tlfc^n 
C £tcftD, f(7)/n^7An-FgttctOVD^7 
ft£ G 

[0 0 6 9] n^lf^-^^^tBLrcya^ 

40 ^ V^^X-rA(0S)ftif^|gOjQScO— SP^/*cti^g|5 

[0 0 7 0] ^6tc, E«»#fr6R*(liShft7py 
7An-F^ 3>tfi-*tcJfA*tife«ffitt3B*- 

so -&t>a^n^ D 
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[0 0 7 1] 

^MisiiK«riii:Tea$ti«nF#ftBii3tfliffi 

[0 0 7 2] BWftJM«fc^>^y*x»#© 

[0073] aetc, vam*Mtimt'fz'7 s yi?xtt 

[0 0 7 4] BB^mi^^WBiJft^JHIRLTft 
[0 0 7 5] £6tc, «1ffffi«*KS&4:gBtt«i«:(c<): 

[0076] aetc. «*aH-r*fHBi*iafi'r-^«- 

So 

[0077] ^rc. ««KE-r««miiiiiM«XKnriis& 

aac«ottftliqj±tc:«;i;T, *o«WIBIBBI*««UTo> 

[0 0 7 8] «i(**E«*r, a#^«rE«-r 

3 C i: J: 9 Wffi*^o3ffiia:«oaM*fT * £ C £fr 

[0 0 7 9] tt«K3ET«mPI««nKcJ:DS 

[0 1 ] *«*»tefi*t*^n--*;WiB«oBS^{k* 
[0 2 3 HflS««tc^tt§^n-^;l/SffcoBg^{t?5" 
[03] IS08802. 11¥«l>'XfAOlf-n>7b-i, 50 
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[0 4] IS08802. Ilipfflt^X-rixOlf-n^^b-A 

[053 **»»Ci5»*-5r--/<eU7 t -fllMB07*- 
T y hOffi3§#ljO0 

[063 »;i^WE P»*«B3lia8T-7;l/«o 

0 

[0 7 3 *awg|*Ol C*— K±Oli3l7*— Mi 
fiJMH 1 <O0 

[083 ^SSi^coi C#- Kl<0il7^-77 
f£#J2O0 

[0 9 3 HfiSJKffiL ANyXfAOTE PBt08£'>- 
^VX^^— h#J<D0 
[01 03 m 1 0%ffi^flg0ftKttlL AN7^tXW> 

[0113 Utt^ffiO^RttL AN*7-T7yH8*OW 
E PSl^M^o-^-v-h 

[01 23 »2OSai0BII8O»a«L ANT*-bX*-Y> 

[01 33 SSM*»0*U*LAN*7-fTVh«*©« 
ftg^o-y *B 

[01 43 nm&m<DmmL ant h<om 
i o mmmmm cmmi an) 

1 1 u — ^;V^*Sii(UB (ftftLAN) 

1 2 t£— uy7V—JU 

2 0 iWWE PSItC^oTBg^ftan^^-^^U- 
A 

2 1 gjftWE P»C<feoTBS#ftanfc7 f -^7U- 

1 0 0 T^-trXtf-Oh 

10 1 ICA-K (WE P»r— 

1 1 0 z^^ti/ 

111 ICA-H (WEPif-7;I/fi«) 
1 2 0 Ti/hAB* 

12 1 I C F (WEPif-7;W) 
1 3 0 ^7^7> hi^* 

13 1 IC*-K (WE Pif-7;l/M) 

1301 mz%$$ 

1 3 0 2 ^— X^>Kg|5 

1303 MAC:i>h ;l/g{5 

1 3 0 4 fpjffllgp 

13 0 5 RAM 

13 0 6 ROM 

1 3 0 7 I Cio— ¥<<>27jl— XSP 

1 3 0 8 T?Vfr— fa WV^x-Xgfl 

13 0 9 IC^-F 

14 0 1 

1 4 0 2 ^-X^VKgfl 
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14 0 3 MAC^Vhn— rt/gp 
1 4 0 4 SJSIgjS 
14 0 5 RAM 
14 0 6 ROM 
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75 

1 4 0 7 IC*- hWJf7i-XB 

1 4 0 8 WISLAN GiffSS) ^>^7x-XS 

14 0 9 I C#- K 
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[03] 
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WEPat««S3H 



[IH7] 

H MP [ T 



70 
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EF DIR 
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[0 8 3 



DF WLAN 




DFxxxxx 



EF DIR 



DFxxxxx 



too 



EF CCD 



EF WLQFI 



|| DF enc 



EF ENCOIR 



DF Canon 



EF KEY1NFO 



yeooo 

jy-82001 



IT 3 



EFpl 



V 2 



[B9] 



IC*-K 



906 

WEPMKJtft* 

r-29 7 



906 



902 

WEPaffiSEKJrfi 



IC*-K 
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WEP«ffi*g*# 



904 

WEPft1ff*S^ 
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im i o] 
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